Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File:                     g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier:          6iEDdgoh5L24pX722MPrsN9fkDWClFrf2te3cGMf86U=
Subject key identifier:   26:C9:6E:A7:97:78:AC:CC:C6:0F:63:18:2C:47:0B:86:C7:B1:26:91
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer:       /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial:       0199FB45BC9A9DB51737CEE9416803F8781B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 07:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:15 +0000
Files and hashes:         1: IOmKwvAlqovOqDg8R3XEjQKQn3k.roa (hash: /PNQa25f3KzGjHOJXgALCT84CCr36de+6y0mC+W9C/U=)
                          2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: nQ2zznP9jKVkhkVRuhV154ZD82gWUXopfh96ohykkCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:bc:9a:9d:b5:17:37:ce:e9:41:68:03:f8:78:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
        Validity
            Not Before: Oct 19 07:01:15 2025 GMT
            Not After : Oct 20 07:01:15 2025 GMT
        Subject: CN=26c96ea79778acccc60f63182c470b86c7b12691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:3b:90:ab:fd:2b:b8:6e:2e:b9:84:5d:fd:
                    d2:ed:13:85:b6:30:8c:f7:37:20:f1:cb:13:17:30:
                    d9:b4:f8:6e:65:28:87:51:3c:5d:1f:cf:50:ac:27:
                    e1:ea:9f:c8:bc:af:16:82:1a:3d:cb:5a:9f:ea:df:
                    c8:c2:3c:ab:dc:62:1d:b8:73:dd:89:61:ab:19:0d:
                    c5:52:68:ad:e6:8d:36:d9:1e:24:43:a9:76:f7:a0:
                    74:b4:24:65:94:62:cc:42:a4:6f:9d:2b:55:a8:0e:
                    1b:69:03:fd:2d:2b:7e:27:53:ec:e6:07:2a:ff:b8:
                    bc:22:ca:5f:37:ff:45:b2:7a:a4:5d:a8:ed:b9:3a:
                    d0:bc:fd:88:2f:5b:6e:0d:3a:ef:03:73:15:6b:e7:
                    7c:cd:37:15:5a:d8:16:af:3d:23:62:5b:1e:7b:84:
                    57:9e:33:75:c3:7d:dd:c5:6f:cc:cb:55:7f:33:d0:
                    71:a1:ca:fa:e5:9e:2f:46:5c:27:87:c9:07:5c:b4:
                    97:80:54:8c:4c:b3:e5:8b:fd:ab:4c:4a:1d:ef:e8:
                    d3:29:95:3a:a0:3c:d7:b7:d8:ef:23:a4:69:75:c7:
                    59:3f:3c:5d:35:7d:98:89:4d:3c:ab:48:46:df:0e:
                    9a:93:1d:32:95:28:97:d4:d5:f6:93:c0:f9:98:b3:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:6E:A7:97:78:AC:CC:C6:0F:63:18:2C:47:0B:86:C7:B1:26:91
            X509v3 Authority Key Identifier:
                keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:7d:13:be:e0:c7:f9:bf:9e:02:00:0d:fd:9f:da:1a:0d:
         d4:4b:6f:9c:66:e5:ec:55:22:7c:eb:d3:f9:4b:48:cf:4e:cc:
         ed:73:63:08:a1:e8:75:1a:2e:63:1f:6e:83:89:91:d2:40:b4:
         8b:61:6b:e4:b4:61:eb:20:4b:2b:bf:00:15:25:2d:19:b6:6b:
         01:30:94:06:4f:2e:a2:3f:a6:68:91:e2:96:41:0f:f4:40:2d:
         cb:f4:69:7a:81:be:00:ce:e5:a8:32:0f:ac:40:82:d3:ed:97:
         15:dc:fe:eb:0b:97:04:a7:0b:0e:0e:4a:d5:4e:ca:f3:24:d9:
         3a:59:91:05:b8:12:83:e7:09:9c:98:9d:61:24:02:fe:54:1d:
         91:d6:58:89:3a:88:0e:3b:1e:41:40:78:ff:e0:e0:b0:e5:04:
         5d:07:92:ef:a3:cd:6e:a3:2d:ed:76:a4:37:4f:f3:5b:4f:f2:
         c1:af:af:bb:db:b6:28:bb:d8:03:4f:41:ac:7d:9e:48:ff:5a:
         91:7c:77:a3:a7:a2:56:84:2a:17:47:6a:11:90:c8:e7:6e:e7:
         6f:c1:26:a8:10:8c:b4:7b:15:de:25:28:79:01:fa:7b:41:21:
         2d:71:a5:97:cb:65:41:d3:25:8d:92:39:6d:df:8e:de:9e:9e:
         71:7a:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:24 2025 by rpki-client